DeDefence ® InfoSec

Demonstrates on best of the best tools and #bugbounty writeups in Medium and articles.

[DeDefence ® InfoSec @DeDefenceSec]

The JWT "none" attack still works way more often than it should 😅

Delete the signature, set alg to "none", and some servers just... believe you.

Did it 3 ways in the new video - Burp, jwt_tool & JWT Hunter 👇

#bugbounty #jwt

https://t.co/112DmnqFtk

[DeDefence ® InfoSec @DeDefenceSec]

Dropped episode 3 of my JWT pentesting series. This one's just the tools + labs I actually use for JWT testing, all free.

Follow for more on pentesting and bug bounty hunting

Handy if you're starting out. 👇🏻

https://t.co/1euSOjxWh7

[DeDefence ® InfoSec @DeDefenceSec]

How hackers fake ANY login - JWT attacks explained (beginner friendly).

Episode 1 out now 👇
https://t.co/njlcDz1vti…

Like it? Full series is coming. Stay tuned!!

#bugbounty #jwt #pentesting #bugbountytips

[DeDefence ® InfoSec @DeDefenceSec]

🔑JWTs are everywhere. But are yours secure?

I just dropped the ultimate guide: AppSec All-in-One series 📚. From stripping signatures to kid injection.

#AppSec #BugBounty #Infosec #Hacking #JWT

Just this is blog is enough to know in and out. 👇

🔗 https://t.co/SqyaovYTC0

[DeDefence ® InfoSec @DeDefenceSec]

🚀 Here is the Part - 02 of “Few most powerful bug bounty browser extensions” series. Follow these video series to find vulnerabilities on the go.

Make sure to subscribe and share. Thanks

#BugBounty #bugbountytips #cybersecuritytips #infosec #Security

https://t.co/aGVKSykh1p

[DeDefence ® InfoSec @DeDefenceSec]

👉🏻 New Video‼️

🚀 Use these browser extensions to find vulnerabilities on the go. Give it a shot !!! It’s just Part - 01. More coming up !

#BugBounty #bugbountytips #hackerone #Pentesting #infosec

https://t.co/2A62bqtzz3

[DeDefence ® InfoSec @DeDefenceSec]

🚀 🚀 Hope this approach helps you getting bounties quicker 🔥

Please do Subscribe and Share.

#BugBounty #bugbountytips #hackerone #Pentesting #infosec

https://t.co/p1doWDoZ4e

[DeDefence ® InfoSec @DeDefenceSec]

⚠️🙌🏻 Coming up next. Stay tuned !!

#bugbountytips #bugbounty #hackerone #pentest #vapt #hacker #infosec

[DeDefence ® InfoSec @DeDefenceSec]

🚀 Follow these tips while selecting a Bug Bounty Program to avoid duplicates. 100% working method. Give it a try:

https://t.co/uJLTwsR4XI

[DeDefence ® InfoSec @DeDefenceSec]

🆕 [Bug Bounty] Swagger Jacker (SJ) - A Tool To Perform Basic Audit on Swagger API’s or Files

#bugbounty #bugbountytips #hackerone #bugcrowd #API #Security #Pentesting

https://t.co/BTOCD7Cktq

[DeDefence ® InfoSec @DeDefenceSec]

🆕 [Bug Bounty] Automate API Pentesting With AI.

Thank you @DanaEpp @getpostman

#BugBounty #bugbountytips #API #Hacking #Security

https://t.co/NvlmSSM3v1

[DeDefence ® InfoSec @DeDefenceSec]

🆕 [ Bug Bounty ] A One-Click SAST Scanner for Android .apk and API’s - Yaazhini Tool

#BugBounty #bugbountytip #Hacking #Security #Pentesting @vegabirdtech

https://t.co/MUmYDc2pk9

[DeDefence ® InfoSec @DeDefenceSec]

🆕 [ Bug Bounty ] Below is the video that demonstrates a tool to Generate Custom Common Passwords using CUPP

https://t.co/5nfMnPkEgg

[DeDefence ® InfoSec @DeDefenceSec]

🆕 [Bug Bounty] Find vulnerabilities while browsing the application by using browser extension called "Modify Header Value".

#bugbountytips #hackerone #infosec #bugbounty #hackernews #bugcrowd #Hacking #Pentesting #tools

https://t.co/32G66ZpSDo

[DeDefence ® InfoSec @DeDefenceSec]

👉 [Easy Setup] Monitor your Bug Bounty Programs scope by integrating Discord webhook.

by @ali_khalkhali0

#bugbountytips #hackerone #infosec #bugbounty #hackernews #bugcrowd #Hacking #Pentesting #tools

https://t.co/YfzBIdopp8

[DeDefence ® InfoSec @DeDefenceSec]

👉 Scan for Sensitive Info Leaks in Github Repos Using "Tartufo" tool. Scans commits and repos for:

- Secret Keys
- Tokens
- Usernames & Passwords, etc

#bugbountytips #hackerone #infosec #bugbounty #hackernews #bugcrowd #Hacking #Pentesting #tools

https://t.co/8sJJvBiWPP

[DeDefence ® InfoSec @DeDefenceSec]

🤖 Automate Finding of "File Upload Vulnerabilities" in most advanced way.

- Upload malicious files
- Bypass file extension restrictions
- Upload shells, etc

#bugbountytips #hackerone #infosec #bugbounty #hackernews #bugcrowd #Hacking #Pentesting #tools

https://t.co/Dd09RMEpYe

[DeDefence ® InfoSec @DeDefenceSec]

👉 Automate your API Pentesting and find critical to low severity issues by just a click.

Use this in bug hunting or pentesting client API collections.

#bugbountytips #hackerone #infosec #bugbounty #hackernews #bugcrowd #Hacking #Pentesting #tools

https://t.co/rsDkwUFOTS

[DeDefence ® InfoSec @DeDefenceSec]

👉 Do not miss to check this while bug hunting.

🔥 Bug Bounty Tools Expo - Exiftool

Watch how we can extract sensitive information from documents metadata

#bugbountytips #hackerone #infosec #bugbounty #hackernews #bugcrowd #Hacking #Pentesting #tools

https://t.co/v95crFUQTH

[DeDefence ® InfoSec @DeDefenceSec]

🔥BB Browser Extensions #02 - Wayback Machine

Stay Tuned. More Coming Up⏳

#bugbountytips #hackerone #infosec #bugbounty #hackernews #bugcrowd #Hacking #Pentesting #tools #recon #infosec #CyberSecurity #bugbountytip

https://t.co/5yxHwE2eSs